This explains how OVERSTÍGA handles your personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). It describes what the site does today. It will be updated, in full, before any feature that collects more.
What we collect
If you subscribe to the newsletter: your email address, the exact consent wording you agreed to, and the date you agreed. Nothing else — no name, no IP address, no tracking identifier. That is all that is needed to send you an email and to prove you asked for it.
If you use the calculators: nothing. Your height, weight, age, sex, body fat and lifts are worked out in your browser and never sent to us. Close the tab and they are gone. There is no account, no cookie and no record.
We do not currently offer accounts, take payments, or collect health information. When we do, this page changes first.
Why we collect it
Only to send you the emails you asked for. Your consent is the lawful basis, and it is the only thing we rely on. The wording you agreed to was:
I agree to receive training and nutrition emails from OVERSTÍGA. My address will not be shared, and I can unsubscribe from any email.
We do not sell your address, rent it, or share it for anyone else’s marketing. Ever.
Where it is stored
In a Supabase database hosted in Frankfurt, Germany (eu-central-1), and on Vercel’s hosting infrastructure. This means your information leaves South Africa.
POPIA section 72 permits that transfer where the receiving country has comparable protection. Germany is subject to the GDPR, which meets that bar. We chose an EU region for exactly this reason.
How long we keep it
Until you unsubscribe, or after three years without you opening anything, whichever comes first. Unsubscribing removes you from the sending list immediately; we keep a record that you unsubscribed so we do not accidentally add you again.
Your rights
Under POPIA you may, at any time and free of charge:
- Ask what we hold about you.
- Have it corrected if it is wrong.
- Have it deleted.
- Withdraw your consent and stop the emails.
- Complain to the Information Regulator if you think we have handled your information badly.
Every marketing email carries an unsubscribe link, which is the fastest route. For anything else, email privacy@grewe.co.za. We will respond within 30 days.
Information Officer: Emmeul Grewe
Cookies
The site sets no tracking cookies and runs no analytics. There is nothing here following you around. See the cookie notice for the detail.
Changes
If this policy changes materially, subscribers are told by email before the change takes effect.
Last updated 7 September 2026. This notice describes the site as built and has not yet been reviewed by an attorney; a review is scheduled before launch. If anything here is unclear, ask and we will explain it rather than pointing you at a longer document.